Identity Security Consultant

About the Job
We are currently looking for an Identity Security Consultant for our Qatar operations.

Requirements

• 8+ years in Identity Security / Security Engineering
• Deep hands-on experience with Active Directory security and Microsoft Entra ID security
• Strong troubleshooting and root-cause analysis skills

Core Responsibilities

• Own identity security engineering across Active Directory (on-prem) and Microsoft Entra ID
• Design, implement, and harden identity security configurations
• Act as technical authority for identity threat prevention, detection, and response
• Bridge Identity Engineering and SOC / Incident Response
• Mitigate Red team findings
• Secure AD DS architecture and configurations
• Implement and enforce the AD Tiering model (Tier 0 / Tier 1 / Tier 2)
• Protect Tier‑0 assets (Domain Controllers, PKI, ADFS, Entra Connect)
• Harden Kerberos authentication, NTLM usage, and restrictions
• Manage privileged groups and admin separation
• Secure trust relationships and forest/domain boundaries
• Implement PAW / SAW / hardened admin access patterns
• Review and remediate AD attack paths and misconfigurations

Entra ID (Azure AD) Security

• Design and enforce Conditional Access policies
• Configure and monitor Entra ID Identity Protection
• Harden tenant security posture and reduce identity attack surface
• Control and monitor legacy authentication and OAuth app permissions

Privileged Access Management (PAM / PIM)

• Design and implement least‑privilege access models
• Implement and operationalize Entra PIM, including Just‑In‑Time role activation and approval workflows

SOC Integration & Detection Engineering

• Work closely with SOC teams on identity-related threats
• Define and improve identity detection use-cases
• Build and maintain identity incident response playbooks

Hardening, Assessments & Continuous Improvement

• Perform AD and Entra ID security posture assessments
• Deliver remediation plans and track closure
• Align identity security posture with Zero Trust principles

Governance, Risk & Compliance

• Ensure identity controls meet internal security standards and regulatory requirements
• Support audit and risk assessments related to identity and access

Documentation & Knowledge Transfer

• Produce clear, audit‑ready documentation including identity architecture diagrams and security standards
• Provide knowledge transfer and guidance to internal teams

Joining Time Frame
2 weeks (maximum 1 month)